US-based internet domain seller GoDaddy is raising significant concerns over a recent Indian court order aimed at curbing fake websites. The company argues that new rules requiring domain registrars to disable default privacy protection could inadvertently create substantial privacy, security, and operational problems for legitimate website owners.
Court Order Sparks Privacy Debate
The Delhi High Court's directive mandates that domain sellers cease offering privacy protection by default, a measure intended to combat the proliferation of fraudulent websites impersonating established brands. GoDaddy, however, has escalated its concerns to a larger bench of judges, highlighting potential unintended consequences.
Typically, domain registrars provide privacy protection services that shield a website owner's personal details—such as name, address, phone number, and email—from public disclosure. The court's order would make these details more easily accessible.
GoDaddy's Concerns: Exposure and Operational Hurdles
GoDaddy contends that disclosing registration details could expose legitimate website owners to risks like stalking, harassment, and spam. The company also points out that domain names are global assets, and implementing such controls in India might necessitate similar changes across its worldwide operations, complicating compliance significantly.
A key challenge cited by GoDaddy is the court's requirement to disclose registration details within 72 hours upon request. The company states it lacks a reliable mechanism to determine who possesses a "legitimate interest" in accessing this sensitive information, making enforcement difficult and potentially arbitrary.
These operational and privacy challenges could lead some domain name companies to withdraw from the Indian market rather than comply with the stringent new requirements, according to GoDaddy.
India's Fight Against Cyber Fraud
The court's crackdown comes amidst a severe increase in online fraud and brand impersonation across India. Reports indicate that the country has received over 2.4 million complaints of alleged cyber fraud, amounting to approximately $2.4 billion since 2019. Numerous Indian and international companies have initiated lawsuits against websites engaged in such deceptive practices.
In December, an Indian court ordered the blocking of more than 1,100 websites identified as being involved in brand impersonation and other fraudulent activities, underscoring the government's resolve to tackle the issue.